Multi-Tenancy Governance

Organizations serving distinct constituencies — agencies serving departments, providers serving payers, groups serving subsidiaries — need genuine separation rather than a filter. The risk is not that one population sees another's content deliberately, but that retrieval assembles fragments across a boundary nobody realized was porous. Separation enforced at retrieval depends on every query path respecting it; separation enforced at index membership does not.

Audience assignment in Centralpoint is a property of records evaluated during retrieval, and material excluded from a population's surface was never embedded into it. The boundary is therefore describable per population rather than dependent on filter behaviour, which is the form a tenant asks to see during due diligence.